cfn-nag 0.4.67 → 0.4.68

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8769d9bcf12f321f03800febc20089cdcac586a599e6dcc40a180ec2a7f99e66
-  data.tar.gz: d3fb30333bb5715f0160418b4061c64eceaf98e57ba9600e609efd2baf9f6840
+  metadata.gz: b886a3dc21b54772b8690e968bf202c87d05a76ee9ffd0488909e0e06d9c0ecf
+  data.tar.gz: ec94c7f22fc6f4dab76bbd60f3f005dadef813da75cd2041431b36ff7080cbb8
 SHA512:
-  metadata.gz: 28ce25e4be510a3416e9722c423b6c6432d4fbc7b08bd81a77c16f450448f5bce00ba1a32fdd99ab174ec9f1031b9b46025effcabc533148d9658fac32a3b28d
-  data.tar.gz: c2c27a01e098799c83fad0b7ac2100e7bbdcd9b345a86957f95caf17ae65ac91c04ef1e577aa282a6ab7eb80fc24abfbfabfe02e5aa6ca8e72d83e01dd52f978
+  metadata.gz: 80aea9e5e5f618aa7d8d9bb5061211e6c8dff13eb0781a621975e2ff7a1f1e91fc8924e7a564ba7429eb7eea6eaa1913745d8439498bd5e21fb3eda82a44bb16
+  data.tar.gz: 57c36540c63a4da65e8482d074858dbdcddc7dca97c4ff7de12f7c14942a3ce0b55bb3624825cd08b1ab76bee37c94066ce348cc21c762f3938f1ce6c4896793

data/lib/cfn-nag/custom_rules/KinesisFirehoseDeliveryStreamRedshiftDestinationConfigurationPasswordRule.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class KinesisFirehoseDeliveryStreamRedshiftDestinationConfigurationPasswordRule < PasswordBaseRule
+  def rule_text
+    'Kinesis Firehose DeliveryStream RedshiftDestinationConfiguration Password ' \
+    'must not be a plaintext string or a Ref to a NoEcho Parameter with a ' \
+    'Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F66'
+  end
+
+  def resource_type
+    'AWS::KinesisFirehose::DeliveryStream'
+  end
+
+  def password_property
+    :redshiftDestinationConfiguration
+  end
+
+  def sub_property_name
+    'Password'
+  end
+end

data/lib/cfn-nag/custom_rules/KinesisFirehoseDeliveryStreamSplunkDestinationConfigurationHECTokenRule.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class KinesisFirehoseDeliveryStreamSplunkDestinationConfigurationHECTokenRule < PasswordBaseRule
+  def rule_text
+    'Kinesis Firehose DeliveryStream SplunkDestinationConfiguration HECToken ' \
+    'must not be a plaintext string or a Ref to a NoEcho Parameter with a ' \
+    'Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F68'
+  end
+
+  def resource_type
+    'AWS::KinesisFirehose::DeliveryStream'
+  end
+
+  def password_property
+    :splunkDestinationConfiguration
+  end
+
+  def sub_property_name
+    'HECToken'
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cfn-nag
 version: !ruby/object:Gem::Version
-  version: 0.4.67
+  version: 0.4.68
 platform: ruby
 authors:
 - Eric Kascic
@@ -210,6 +210,8 @@ files:
 - lib/cfn-nag/custom_rules/IotPolicyWildcardResourceRule.rb
 - lib/cfn-nag/custom_rules/KMSKeyRotationRule.rb
 - lib/cfn-nag/custom_rules/KMSKeyWildcardPrincipalRule.rb
+- lib/cfn-nag/custom_rules/KinesisFirehoseDeliveryStreamRedshiftDestinationConfigurationPasswordRule.rb
+- lib/cfn-nag/custom_rules/KinesisFirehoseDeliveryStreamSplunkDestinationConfigurationHECTokenRule.rb
 - lib/cfn-nag/custom_rules/KinesisStreamStreamEncryptionRule.rb
 - lib/cfn-nag/custom_rules/LambdaPermissionInvokeFunctionActionRule.rb
 - lib/cfn-nag/custom_rules/LambdaPermissionWildcardPrincipalRule.rb